Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/0/A8E21D506BD647922C7407C92DF2E0618175A5B3.mft
File:                     A8E21D506BD647922C7407C92DF2E0618175A5B3.mft (raw, json)
Hash identifier:          y7aELXUk2xRryKUXol53FDR8zSFoUeJAZ/bsQ638XkQ=
Subject key identifier:   D8:41:1A:EE:7D:55:BD:46:DD:B6:72:0A:73:49:18:73:D3:5C:DB:D7
Authority key identifier: A8:E2:1D:50:6B:D6:47:92:2C:74:07:C9:2D:F2:E0:61:81:75:A5:B3
Certificate issuer:       /CN=A8E21D506BD647922C7407C92DF2E0618175A5B3
Certificate serial:       1D73BF5E1A76CF63166E7DCC0E4DDB245F178CF1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8E21D506BD647922C7407C92DF2E0618175A5B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/0/A8E21D506BD647922C7407C92DF2E0618175A5B3.mft
Manifest number:          03B1
Signing time:             Wed 25 Oct 2023 21:05:18 +0000
Manifest this update:     Wed 25 Oct 2023 21:00:18 +0000
Manifest next update:     Fri 27 Oct 2023 00:10:18 +0000
Files and hashes:         1: 323830343a376362303a3a2f33322d3438203d3e20323731353132.roa (hash: BPut51nrCAjWgYeKHpiRwy+vFXN1xwRHFQCpKzhTylw=)
                          2: A8E21D506BD647922C7407C92DF2E0618175A5B3.crl (hash: 7T8N6vJZDhqt9hItTpCNb/so2omEiaX/i1ez6ox/QLM=)
                          3: 3138312e3233322e3132382e302f32322d3234203d3e20323731353132.roa (hash: owx8xGClPg0GHEDnX7m+398MqfKmtrvH8VZzAf9V7+8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:73:bf:5e:1a:76:cf:63:16:6e:7d:cc:0e:4d:db:24:5f:17:8c:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8E21D506BD647922C7407C92DF2E0618175A5B3
        Validity
            Not Before: Oct 25 21:00:18 2023 GMT
            Not After : Oct 27 00:10:18 2023 GMT
        Subject: CN=D8411AEE7D55BD46DDB6720A73491873D35CDBD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fd:63:34:01:0b:7a:43:50:5d:49:89:38:56:
                    0a:85:40:f7:ff:40:b8:b7:af:62:c6:b0:c2:e7:01:
                    7c:73:f9:b3:51:34:71:de:a8:d1:25:62:cc:fa:15:
                    34:c9:8a:55:5b:47:d1:90:e6:8b:6b:40:b3:20:b6:
                    c4:d2:76:0e:89:63:9c:b1:53:d3:53:8f:a8:96:a9:
                    47:7e:29:d8:09:16:79:d6:98:07:15:7d:12:82:5d:
                    f2:93:e4:ef:33:b0:1f:87:e9:8c:a9:ed:7b:84:cf:
                    0a:5a:b8:8f:53:70:0e:d5:58:f7:95:7b:c2:69:33:
                    c8:ab:ac:ea:0c:ce:b4:05:00:47:b8:a7:22:e2:b4:
                    f0:5c:e5:48:4a:8f:44:b2:d4:13:6a:1d:9c:03:03:
                    c5:3a:02:6d:ab:97:6d:7d:b8:77:79:43:14:0c:73:
                    5e:0d:cc:99:af:54:ba:8b:a7:8a:30:27:30:95:0b:
                    64:04:14:70:3f:25:54:92:83:c2:1a:f3:ab:e0:d7:
                    16:65:7b:71:11:0d:3d:81:1d:2f:19:51:1b:38:c1:
                    8d:40:3b:f7:67:ee:33:f7:b7:fa:e9:59:22:3d:a8:
                    24:14:38:e3:8a:3a:78:05:27:85:98:aa:5e:4c:8d:
                    27:28:6a:05:f2:df:8e:b4:a6:c6:7c:4d:05:e3:27:
                    07:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:41:1A:EE:7D:55:BD:46:DD:B6:72:0A:73:49:18:73:D3:5C:DB:D7
            X509v3 Authority Key Identifier:
                keyid:A8:E2:1D:50:6B:D6:47:92:2C:74:07:C9:2D:F2:E0:61:81:75:A5:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/0/A8E21D506BD647922C7407C92DF2E0618175A5B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8E21D506BD647922C7407C92DF2E0618175A5B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/0/A8E21D506BD647922C7407C92DF2E0618175A5B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:05:b5:e1:02:86:ce:c7:8a:73:64:03:52:e2:d9:3c:5b:1f:
         f5:60:ed:dd:72:4a:b2:26:a6:c3:40:7c:5d:ff:5e:63:0b:b5:
         21:b3:5e:63:93:b6:c0:06:d7:4b:ba:a6:d0:e1:09:14:47:a0:
         28:fe:a8:e5:23:31:21:2e:3f:30:ff:30:45:4c:90:f9:f6:44:
         8b:20:36:4f:e8:d9:2d:70:13:95:c5:b3:a5:4b:a5:2c:69:2d:
         59:98:ab:a9:03:15:8f:d1:0e:9b:99:33:da:a6:a3:40:08:5e:
         73:35:ff:9a:ee:60:8d:38:bd:93:34:44:b4:0b:14:eb:93:ee:
         ba:88:a0:fc:a8:83:b0:35:f6:c2:91:32:f5:ff:c4:15:a3:6f:
         b7:8e:21:cf:2d:a2:03:79:a4:4e:a8:e1:f3:9d:7f:dc:70:a2:
         98:5a:20:65:3c:e5:bb:f0:36:38:b7:d8:38:38:f5:8a:e5:0a:
         b9:22:67:73:2a:d5:e3:82:bb:26:07:8e:e6:7a:cf:d7:4e:3e:
         6a:b5:17:d2:b2:89:1b:3e:18:a1:ab:ec:6d:5d:be:30:15:3b:
         7a:a5:1a:cd:90:d5:f4:52:67:90:cd:2a:93:a8:35:eb:e1:b5:
         9e:59:9d:8a:c3:99:12:4b:85:02:2d:8c:7c:9d:74:3e:e9:23:
         43:d8:d4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----